Attach package.json contents from a remote registry to a dependency stream